[Xitami-Dev] Weird stuff

[appdevelopment]

They are trying the stack overflow exploit.  See the following link for a
detailed description of this.

http://destroy.net/machines/security/P49-14-Aleph-One
Jack Breon

----- Original Message -----
From: "Flemming Veggerby" <fveggerby@fdf.dk>
To: <xitami-dev@lists.xitami.org>
Sent: Saturday, August 04, 2001 5:09 AM
Subject: SV: [Xitami-Dev] Weird stuff


> I have a good feeling, but not sure, I thinkk it's Code Red Worm, which
> doesn't effect Xitami, so I think you don't need to worry, except for the
> large logs it can generate.
>
> Flemming Veggerby
>
> -----Oprindelig meddelelse-----
> Fra: xitami-dev-admin@lists.xitami.org
> [mailto:xitami-dev-admin@lists.xitami.org]På vegne af Rob Judd
> Sendt: 4. august 2001 10:53
> Til: xitami-dev@lists.xitami.org
> Emne: [Xitami-Dev] Weird stuff
>
>
> Guys,
>
> I know this isn't related to Xitami, but I'm stuck. Anyone recognise
> what this might be? I'm getting about 6 or 7 log entries - with
> corresponding errors - daily. A lookup shoes they're from random
> companies, many of them Asian. UTF8 ?? I dunno. The text is always
> identical apart from the IP number.
>
> Rob Judd
>
>
> 61.32.34.140 - - [04/Aug/2001:02:38:36 +1000] "GET /
> default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
> NNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801
> %u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53f
> f%u0078%u0000%u00=a%20 HTTP/1.0" 404 -1 "" ""
>
> ---
> Judd Electronics
> Melbourne, Australia
>
> Domain: http://ob-wan.com
> Personal homepage: http://judd.ob-wan.com
> Online column: http://www.australiansabroad.com/oz/brussels/
>
> --
> Xitami-Dev -- Xitami Development Mailing List
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
>
>
> --
> Xitami-Dev -- Xitami Development Mailing List
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
>